ghost: Add device-specific SELinux policies

Change-Id: Ic368cecd7e95c61c42ed290b5f47d3e845d50359